CVE-2020-8327CWE-428

A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to…

High · published April 14, 2020

CVSS v3.1
7.3
EPSS
0%
Percentile
29.5
In the wild
Unconfirmed
What it is

A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to execute code with elevated privileges.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00369 · 29.5th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2020-04-14T21:05Z
EPSS history
Timeline
  • 14 APR 21:05Z
    A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to…
    cvelistv5